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AMENDMENTS TO THE CLAIMS 

Claims 1-15 - Cancelled 

1 6. (New) A method for a registry of business entity definitions to handle user 
requests to access business entity definitions, the method comprising: 

receiving a request from a user to access a business entity definition; 

obtaining the identity of the user from data associated with the request,; 

determining whether the user has permission to access information in the 
business entity definition from permission details associated with the business entity 
definition and the identity of the user; and 

denying the user access to information in the business entity definition if it is 
determined that the user does not have permission; 

wherein the information in the business entity definition comprises a plurality of 
information elements each having permission details associated therewith; 

wherein determining whether the user has permission to access information in 
the business entity definition from permission details associated with the business entity 
definition and the identity of the user comprises determining from permission details 
associated with each information element whether the user has permission to access 
that information element; and 

wherein denying the user access to information in the business entity definition if 
it is determined that the user does not have permission comprises denying the user 
access to those information elements for which it is determined that the user does not 
have permission. 
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1 7. (New) The method of claim 1 6 wherein the request specifies a search criteria, 
and wherein the method further comprises: 

determining what information in the business entity definition the user wishes to 
access using the search criteria to locate the business entity definition; and 

determining whether the user has permission to access the information that the 
user wishes to access. 

1 8. (New) The method of claim 1 6, wherein determining whether the user has 
permission to access information in the business entity definition from permission 
details associated with the business entity definition and the identity of the user 
comprises determining whether a user has permission to access an information element 
from an access policy and permission details associated with a different information 
element. 

1 9. (New) The method of claim 1 8 wherein the information elements are in a 
hierarchy and wherein determining whether the user has permission to access 
information in the business entity definition from permission details associated with the 
business entity definition and the identity of the user comprises determining that a user 
does not have permission to access a first information element if permission details 
associated with one or more second information elements directly beneath the first 
information element in the hierarchy indicate that user does not have access to one or 
more of the second information elements. 
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20. (New) A registry of business entity definitions for handling requests to access 
business entity definitions, the registry comprising: 

means for receiving a request from a user to access a business entity definition; 
means for obtaining the identity of the user from data associated with the 
request; 

means for determining whether the user has permission to access information in 
the business entity definition from permission details associated with the business entity 
definition and the identity of the user; and 

means for denying the user access to information in the business entity definition 
if it is determined that the user does not have permission; 

wherein the information in the business entity definition comprises a plurality of 
information elements each having permission details associated therewith; 

wherein the means for determining comprises means for determining from 
permission details associated with each information element whether the user has 
permission to access that information element; and 

wherein the means for denying comprises means for denying the user access to 
those information elements for which it is determined that the user does not have 
permission. 

21 . (New) The registry of claim 20 wherein the request specifies a search criteria, 
and wherein the registry further comprises: 
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means for determining what information in the business entity definition the user 
wishes to access using the search criteria to locate the business entity definition. 

22. (New) The registry of claim 20, wherein the means for determining whether the 
user has permission to access information in the business entity definition from 
permission details associated with the business entity definition and the identity of the 
user further comprises means for determining whether a user has permission to access 
an information element from an access policy and permission details associated with a 
different information element. 

23. (New) The registry of claim 22 wherein the information elements are in a 
hierarchy and the access policy specifies that a user does not have permission to 
access a first information element if permission details associated with one or more 
second information elements directly beneath the first information element in the 
hierarchy indicate that user does not have access to one or more of the second 
information elements. 

24. (New) The registry of claim 20, further comprising: 

means for locating the permission details in a file system in which the permission 
details are in a location in the file system which is defined according to the information 
element with which they are associated. 
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25. (New) The registry of claim 20, wherein the registry is a UDDI registry and the 
information in the business entity definition is a business entity information element, the 
business entity information element containing one or more business service entity 
information elements, each business service entity containing one or more binding 
template information elements and each binding template containing one or more 
references each referring to a technical model information element. 

26. (New) A computer program product for a registry of business entity definitions to 
handle user requests to access business entity definitions, the computer program 
product comprising: 

a computer usable medium having computer usable program code embodied 
therewith, the computer usable program code comprising: 

computer usable program code configured to receive a request from a 

user to access a business entity definition; 

computer usable program code configured to obtain the identity of the 
user from data associated with the request; 

computer usable program code configured to determine whether the user 
has permission to access information in the business entity definition from 
permission details associated with the business entity definition and the identity 
of the user; and 

computer usable program code configured to deny the user access to 
information in the business entity definition if it is determined that the user does 
not have permission; 

wherein the information in the business entity definition comprises a plurality of 
information elements each having permission details associated therewith; 
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wherein the computer usable program code configured to determine whether the 
user has permission to access information in the business entity definition from 
permission details associated with the business entity definition and the identity of the 
user comprises computer usable program code configured to determine from 
permission details associated with each information element whether the user has 
permission to access that information element; and 

wherein the computer usable program code configured to deny the user access 
to information in the business entity definition if it is determined that the user does not 
have permission comprises computer usable program code configured to deny the user 
access to those information elements for which it is determined that the user does not 
have permission. 

27. (New) The computer program product of claim 26 wherein the request specifies a 
search criteria, and further comprising: 

computer usable program code configured to determine what information in the 
business entity definition the user wishes to access using the search criteria to locate 
the business entity definition; and 

computer usable program code configured to determine whether the user has 
permission to access the information that the user wishes to access. 

28. (New) The computer program product of claim 26, wherein the computer usable 
program code configured to determine whether the user has permission to access 
information in the business entity definition from permission details associated with the 
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business entity definition and the identity of the user comprises computer usable 
program code configured to determine whether a user has permission to access an 
information element from an access policy and permission details associated with a 
different information element. 

29. (New) The computer program product of claim 28 wherein the information 
elements are in a hierarchy and wherein determining whether the user has permission 
to access information in the business entity definition from permission details associated 
with the business entity definition and the identity of the user comprises determining that 
a user does not have permission to access a first information element if permission 
details associated with one or more second information elements directly beneath the 
first information element in the hierarchy indicate that user does not have access to one 
or more of the second information elements. 
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